Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 8 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 400,565All CVEsplus 18,890 rejected
- 356Last 24 hours2,974 in the last 7 days
- 17,093Last 30 days1,578 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 53 | 60 | 12 | 0 | 126 | 473 |
| 2025 | 0 | 40 | 27 | 16 | 0 | 83 | 347 |
| 2024 | 0 | 22 | 17 | 12 | 0 | 51 | 264 |
| 2023 | 9 | 34 | 44 | 8 | 0 | 95 | 213 |
| 2022 | 0 | 22 | 32 | 1 | 0 | 55 | 118 |
| 2021 | 1 | 34 | 22 | 0 | 0 | 57 | 63 |
| 2020 | 0 | 2 | 4 | 0 | 0 | 6 | 6 |
| Title | ||
|---|---|---|
| CVE-2026-100493 | An integer overflow in the DDS RGB888 loader of AMD Compressonator SDK could allow an attacker to supply a crafted DDS file that causes an undersized heap…AMD · AMD Compressionator SDK | Medium6.9 |
| CVE-2026-40652 | An out-of-bounds read condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted Truevision Advanced…AMD · AMD Compressionator SDK | Medium5.2 |
| CVE-2026-40661 | An out-of-bounds write (OOW) condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface…AMD · AMD Compressionator SDK | Medium5.2 |
| CVE-2026-40660 | A heap-based out-of-bounds (OOB) read vulnerability in the AMD Compressonator SDK could allow an attacker with local access to read out-of-bounds heap memory,…AMD · AMD Compressionator SDK | Medium5.2 |
| CVE-2026-40659 | An integer overflow condition in the AMD Compressonator SDK could allow an attacker with local access to supply a specially crafted DirectDraw Surface (DDS)…AMD · AMD Compressionator SDK | Medium5.1 |
| CVE-2026-43603 | A NULL pointer dereference in the Linux GPU driver could potentially lead to a kernel crash and result in denial of service.AMD · AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | Medium6.9 |
| CVE-2026-43598 | Improper input validation in the AMD ROCm Communication Collectives Library (RCCL) could allow a compromised peer rank or network-adjacent attacker to…AMD · AMD Instinct™ MI210 | High7.7 |
| CVE-2026-0461 | Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware…AMD · Zynq™ UltraScale+ MPSoCs | High7.5 |
| CVE-2026-0482 | In AMD Versal™ Adaptive SoC devices, insufficient boundary checks in USB boot mode—when enabled through board modifications—could allow crafted images to…AMD · Alveo™ Accelerator Cards | Medium5.4 |
| CVE-2023-20577 | A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary…AMD · 2nd Gen AMD EPYC™ Processors | High7.4 |
| CVE-2023-20576 | Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege…AMD · AMD Ryzen™ 3000 Series Desktop Processors | High7.7 |
| CVE-2023-31308 | A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read.AMD · AMD Radeon™ PRO V620 Graphics Products | Low3.3 |
| CVE-2023-20511 | Release of an invalid pointer in the AMD kernel mode driver (KMD) could allow a privileged attacker to create a double free condition potentially leading to…AMD · AMD Radeon™ Instinct™ MI25 Graphics Products | Medium6.4 |
| CVE-2025-54512 | A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially…AMD · AMD Ryzen™ Master | High7.0 |
| CVE-2026-0465 | A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in…AMD · AMD Ryzen™ Master | Medium5.6 |
| CVE-2025-0046 | Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution.AMD · AMD Power Design Manager (PDM) Software Installer for Windows | High7.0 |
| CVE-2025-8087 | A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process,…AMD · AMD Power Design Manager (PDM) Software Un-Installer | High7.0 |
| CVE-2025-48505 | Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation,…AMD · Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows | High7.3 |
| CVE-2025-48506 | Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially…AMD · Vitis™ Unified Installer for FPGAs & Adaptive SoCs in Windows | High7.3 |
| CVE-2025-61970 | Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially…AMD · Vitis™ Embedded Single File Download (SFD) for Windows | High7.3 |
| CVE-2025-0041 | Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to create…AMD · Vitis™ Embedded Single File Download (SFD) for Windows | High7.3 |
| CVE-2026-43606 | Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing…AMD · Vitis™ Libraries - Security Module | High7.7 |
| CVE-2023-20572 | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code,…AMD · AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | Medium5.6 |
| CVE-2023-20540 | An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code,…AMD · AMD Ryzen™ 3000 Series Desktop Processors | Low1.8 |
| CVE-2026-40677 | The use of insecure HTTP transport within AMD optional tools could allow an attacker to conduct a man-in-the-middle attack, potentially leading to arbitrary…AMD · AMD Management Console (AMC) | High7.7 |
| CVE-2024-21944 | Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, ring0 access on a system with a…AMD · AMD EPYC™ 7003 Series Processors | Medium5.3 |
| CVE-2026-28237 | Unrestricted resource allocation in AMD uProf may be exploitable to consume excessive system resources, potentially leading to a loss of availability.AMD · AMD µProf | Medium6.8 |
| CVE-2026-0466 | Improper access control in AMD uProf may allow a local attacker with user privileges to write to the kernel-shared memory section, potentially resulting in…AMD · AMD µProf | Medium6.8 |
| CVE-2025-54509 | Improper access control for register interface in the Input-Output Memory Management Unit (IOMMU) could allow a privileged attacker to cause non-coherent…AMD · AMD EPYC™ 9004 Series Processors | Medium4.0 |
| CVE-2021-46747 | Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN…AMD · AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics | High7.1 |
| CVE-2024-36343 | Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write…AMD · AMD EPYC™ 4004 | Medium4.6 |
| CVE-2025-54518 | Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a…AMD · AMD EPYC™ 7002 Series Processors | High7.3 |
| CVE-2026-0481 | Unrestricted IP address binding in the AMD Device Metrics Exporter (ROCm ecosystem) could allow a remote attacker to perform unauthorized changes to the GPU…AMD · AMD Instinct™ MI210 | Critical9.2 |
| CVE-2024-21950 | An out of bounds read in the remote management firmware could allow a privileged attacker read a limited section of memory outside of established bounds…AMD · AMD Instinct™ MI300X | Low1.8 |
| CVE-2025-52532 | A race condition in the MxGPU-Virtualization driver’s ioctl path caused by concurrent unsynchronized access to the global variable amdgv_cmd in an unlocked…AMD · AMD Radeon™ PRO V620 | Low2.0 |
| CVE-2024-36323 | Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register…AMD · AMD Radeon™ RX 7000 Series Graphics Products | High8.8 |
| CVE-2024-36333 | A DLL hijacking vulnerability in the AMD Cleanup Utility could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code…AMD · AMD Radeon™ RX 5000 Series Graphics Products | High7.0 |
| CVE-2024-36334 | Improper verification of cryptographic signature in the Radeon RGB tool could allow a malicious file placed in the installation directory to be run with…AMD · AMD Radeon™ RX 7000 Series Graphics Products | High7.0 |
| CVE-2026-0427 | Improper cleanup of shared register resources in GPU firmware could allow an admin-privileged attacker from a Guest Virtual machine (VM) to access these shared…AMD · AMD Instinct™ MI210 | Medium4.6 |
| CVE-2024-36332 | Improper isolation of GPU HW register space could allow a privileged attacker in malicious Guest Virtual Machine (VM) to perform unauthorized access to…AMD · AMD Radeon™ PRO V710 | Medium6.8 |
| CVE-2025-0044 | An out-of-bounds read in power management firmware by a malicious local attacker with low privileges could potentially lead to a partial loss of…AMD · AMD Ryzen™ Al Max+ | Medium4.8 |
| CVE-2023-31309 | Improper validation in Power Management Firmware (PMFW) may allow an attacker with privileges to pass malformed workload arguments when exporting table data…AMD · AMD Radeon™ RX 6000 Series Graphics Products | Medium6.8 |
| CVE-2023-31317 | Improper restriction of operations within the bounds of a memory buffer in the AMD secure processer (ASP) could allow an attacker to read or write to protected…AMD · AMD Radeon™ RX 6000 Series Graphics Products | High8.8 |
| CVE-2025-54511 | Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without…AMD · MI-25 | Medium5.3 |
| CVE-2025-54517 | Out of bounds write in AMD AMDGV_CMD_GET_DIAG_DATA ioctl handler could allow a local user to escalate privileges via remote code execution.AMD · AMD Instinct™ MI250 | High8.5 |
| CVE-2025-66660 | Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_CHECK_TA_COMPAT to cause incorrect…AMD · AMD Radeon™ RX 6000 Series Graphics Products | Low1.8 |
| CVE-2025-66664 | Insufficient parameter sanitization in AMD Secure Processor (ASP) TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_LOAD_GFX_IP_FW…AMD · AMD Radeon™ RX 6000 Series Graphics Products | Medium4.6 |
| CVE-2026-0428 | Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV_COPY_VF_CHIPLET_REGS to write invalid…AMD · AMD Instinct™ MI300A | Low1.8 |
| CVE-2025-48516 | Insecure default configuration state of DDR5 memory module by AGESA Bootloader Firmware could allow an attacker with local user privilege to abuse the…AMD · AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics | Medium6.9 |
| CVE-2023-31316 | Improperly preserved integrity of hardware configuration state during a power save/restore operation in the AMD Secure Processor (ASP) could allow an attacker…AMD · AMD Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics | High7.1 |